Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: ZhUJKU74VN6l5g7E9L7FDnoklhO4/nkA3+KCV0CfCeE=
Subject key identifier: 94:B3:3F:50:7F:87:F6:21:C6:1F:4E:55:C0:7F:7E:22:BC:E9:60:3B
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 0194BBCDE967BA52658EEC736D33DA49712F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 10BE
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: ixNcKWnfkPo/ITRqveR9qWxaxDZA03/6yMLgY5ZkNag=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:67:ba:52:65:8e:ec:73:6d:33:da:49:71:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=94b33f507f87f621c61f4e55c07f7e22bce9603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:14:30:b5:57:92:4e:86:5f:5d:58:ff:e6:
db:d2:6c:e0:81:fd:0a:6c:3c:cc:61:5c:12:ad:e7:
b0:e9:6a:e0:42:2d:fc:68:82:1b:8d:a0:26:06:57:
2d:b0:03:22:3c:e2:b8:47:71:2a:66:b1:6a:30:03:
17:df:92:fc:56:72:b7:cd:e6:56:a4:09:4c:7e:23:
35:cc:95:23:92:a2:42:bf:bf:a7:ec:05:f3:eb:aa:
56:df:64:1a:1f:2c:93:44:b6:79:32:69:de:02:5e:
c9:fa:c2:47:c5:ec:90:c1:35:6e:1b:ac:4f:3e:da:
80:10:a8:04:3d:ee:96:b6:7c:dd:33:4b:e5:03:17:
b1:a6:1d:2b:19:e4:86:fc:22:2a:ed:be:7e:a4:f4:
a4:10:56:cc:3c:b5:18:d8:25:f7:00:19:04:8b:e6:
86:46:e2:f2:de:e2:2f:aa:6a:b5:3a:28:56:45:e1:
9a:52:72:c3:c8:82:06:f6:d2:81:7f:d1:98:c5:4a:
97:a9:55:03:60:7a:03:5d:32:2f:4a:18:80:a1:00:
b9:a8:d7:f1:ad:ea:e7:3d:35:f1:bb:e7:95:32:b0:
50:c6:8c:09:3e:41:36:d9:ec:44:83:4b:b4:54:4d:
89:c0:75:17:11:52:f4:83:a0:c2:08:b9:8e:7e:59:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:3F:50:7F:87:F6:21:C6:1F:4E:55:C0:7F:7E:22:BC:E9:60:3B
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:dd:ed:f4:55:45:47:b6:31:a2:57:78:13:77:cc:c3:6b:
10:74:59:ad:54:95:26:a5:be:8f:80:8d:b4:5f:40:88:24:58:
dd:45:57:df:ef:27:23:50:50:72:43:5b:42:55:a9:9c:8a:e3:
9e:0d:c9:44:cd:46:69:dc:63:f6:df:d9:8c:04:c0:8a:fc:cb:
ec:4a:4f:a8:c8:4b:c0:5e:f8:5a:21:2a:15:d8:e1:01:e8:ac:
f0:dd:72:4b:14:88:a3:83:10:a0:4e:f6:39:64:c6:fb:a8:86:
e1:11:b3:35:d8:12:03:c4:70:1b:74:72:f1:9b:53:01:dc:91:
b3:73:42:dc:d1:ca:96:06:2c:5b:fe:6a:50:73:1b:ab:dd:88:
b6:f5:2a:26:6e:92:d6:96:4c:f1:ee:08:6b:c0:bb:4d:fe:78:
84:74:ac:6b:82:b8:21:a2:4d:97:1c:35:69:fa:35:9f:1f:fd:
39:83:cd:1d:00:8d:83:19:60:9e:5c:74:ec:b7:84:07:9d:5a:
f1:46:46:5f:02:f7:9c:72:d8:e0:ca:e4:5b:25:63:83:43:d8:
52:e8:50:8f:d8:3b:b0:39:60:ea:1c:48:63:7a:8b:9a:70:d2:
cb:28:43:c8:3b:a4:7e:0d:57:f1:ae:25:09:1e:c5:0e:2a:9e:
9f:30:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:09 2025 by rpki-client